You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: README.md
+84-34Lines changed: 84 additions & 34 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -61,22 +61,67 @@ In case you would like to perform a DevSecOps assessment, the following tools ar
61
61
## Container
62
62
63
63
1. Install [Docker](https://www.docker.com)
64
-
2. Run `docker pull wurstbrot/dsomm:latest && docker run --rm -p 8080:8080 wurstbrot/dsomm:latest`
64
+
2. Run
65
+
```bash
66
+
docker pull wurstbrot/dsomm:latest && docker run --rm -p 8080:8080 wurstbrot/dsomm:latest
67
+
```
65
68
3. Browse to <http://localhost:8080> (on macOS and Windows browse to <http://192.168.99.100:8080> if you are using docker-machine instead
66
69
of the native docker installation)
67
70
68
-
For customized DSOMM, take a look at https://github.com/wurstbrot/DevSecOps-MaturityModel-custom.
71
+
For customized DSOMM, take a look at https://github.com/wurstbrot/DevSecOps-MaturityModel-custom.
69
72
70
-
You can download your current state from the circular heatmap and mount it again via
73
+
### Use the latest model data
71
74
72
75
```bash
73
-
wget https://raw.githubusercontent.com/devsecopsmaturitymodel/DevSecOps-MaturityModel-data/main/src/assets/YAML/generated/generated.yaml# or go to /circular-heatmap and download edited yaml (bottom right)
74
-
docker run -p 8080:8080 -v /tmp/generated.yaml:/srv/assets/YAML/generated/generated.yaml wurstbrot/dsomm:latest
The `generated.yaml` file is dynamically created during the build process. If you don’t see this file after setup, follow these steps to generate it:
144
+
## Generating the `model.yaml` file
102
145
103
-
**1. Clone the Required Repository:**
104
-
The `generated.yaml` file is built via the DevSecOps-MaturityModel-data repository. Make sure you have cloned and set it up correctly.
146
+
The `model.yaml` file is dynamically created during the build process. If you don’t see this file after setup, follow these steps to generate it:
105
147
106
-
**2. Run the Build Command:**
107
-
Navigate to the project directory and run the following command:
108
-
-*Using npm:*
148
+
1.**Clone the Required Repository:**
149
+
The `model.yaml` file is built via the [DevSecOps-MaturityModel-data repository](https://github.com/devsecopsmaturitymodel/DevSecOps-MaturityModel-data). Make sure you have cloned and set it up correctly.
109
150
110
-
```sh
111
-
npm run build
112
-
````
113
-
114
-
- *Using yarn:*
115
-
116
-
```sh
117
-
yarn build
118
-
```
151
+
2.**Run the Build Command:**
152
+
Navigate to the project directory and run the following command:
153
+
- Using `npm`:
154
+
```bash
155
+
npm run build
156
+
```
157
+
- Using `yarn`:
158
+
```bash
159
+
yarn build
160
+
```
119
161
120
162
*If the file is missing, ensure all dependencies are installed and that you have the correct access to the `DevSecOps-MaturityModel-data` repository.*
121
163
122
164
## Activity Definitions
123
165
The definition of the activities are in the [data-repository](https://github.com/devsecopsmaturitymodel/DevSecOps-MaturityModel-data).
124
166
125
167
## Teams and Groups
126
-
To customize these teams, you can create your own [meta.yaml](src/assets/YAML/meta.yaml) file with your unique team definitions.
168
+
169
+
To customize these teams, you can create your own [meta.yaml](src/assets/YAML/meta.yaml) file with your unique team definitions.
127
170
128
171
Assessments within the framework can be based on either a team or a specific application, which can be referred to as the context. Depending on how you define the context or teams, you may want to group them together.
129
172
@@ -132,21 +175,27 @@ Here are a couple of examples to illustrate this, in breakers the DSOMM word:
132
175
- Multiple teams (teams) can belong to a larger department (group).
133
176
134
177
Feel free to create your own [meta.yaml](src/assets/YAML/meta.yaml) file to tailor the framework to your specific needs and mount it in your environment (e.g. kubernetes or docker).
178
+
135
179
Here is an example to start docker with customized meta.yaml:
136
-
```
180
+
181
+
```bash
137
182
# Customized meta.yaml
138
183
cp src/assets/YAML/meta.yaml .
139
-
docker run -v $(pwd)/meta.yaml:/srv/assets/YAML/meta.yaml -p 8080:8080 wurstbrot/dsomm
184
+
docker run -v "$PWD/meta.yaml:/srv/assets/YAML/meta.yaml" -p 8080:8080 wurstbrot/dsomm
0 commit comments